Perl 6 - the future is here, just unevenly distributed

IRC log for #salt, 2014-07-25

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:03 maxskew joined #salt
00:10 taterbase joined #salt
00:12 zandy joined #salt
00:13 lionel joined #salt
00:15 Luke joined #salt
00:19 noescape joined #salt
00:21 noescape hello salt community :) How can I make some basic mathematic operation in jinja? Cant find anything.... I want to generate a mysql.conf with a setting of buffer pool size to 80% of available ram
00:21 forrest noescape, http://jinja.pocoo.org/docs/templates/#math
00:22 noescape I can get the amount of ram from grains, but cant do some basic math on it... i.e calculate 80% from it
00:22 noescape ah
00:22 noescape thank you :)
00:22 forrest noescape, yea np, should be as easy as {{ grains_here * 0.8 }}
00:25 noescape forrest: thank you again. And how to round that number? or maybe it will be rounded allready?
00:26 forrest noescape, http://jinja.pocoo.org/docs/templates/#round
00:26 forrest so you can round it, then make it an int, etc
00:26 noescape forrest thank you again. You are perfect
00:26 forrest I've gotta head out for the day, best of luck!
00:26 forrest noescape, let's not get too crazy here :P
00:31 higgs001 joined #salt
00:39 Supermathie joined #salt
00:43 ajprog_laptop1 joined #salt
00:48 Luke joined #salt
00:49 SpeeR if I have 2 roles specified in the minion config, to so I have to successfully match both of these
00:50 SpeeR I have grains: roles: -sweb -prod
00:50 SpeeR and in my init.sls I have this {% if grains['roles'] == 'sweb' %}
00:59 otter768 joined #salt
01:10 smcquay joined #salt
01:12 vbabiy joined #salt
01:12 zandy joined #salt
01:16 svs left #salt
01:16 tkharju2 joined #salt
01:27 Katafalkas joined #salt
01:31 Pewpewarro-1 joined #salt
01:35 lionel joined #salt
01:35 tinytub joined #salt
01:36 tkharju3 joined #salt
01:42 jalaziz joined #salt
01:46 Pewpewarrows joined #salt
01:47 Pewpewarrows joined #salt
01:57 ckao joined #salt
01:58 to_json joined #salt
02:00 XenophonF joined #salt
02:01 bhosmer joined #salt
02:01 tkharju4 joined #salt
02:03 mapu joined #salt
02:05 deepz88 joined #salt
02:06 deepz88 joined #salt
02:08 zandy joined #salt
02:09 deepz88 joined #salt
02:12 vbabiy joined #salt
02:14 deepz88 joined #salt
02:14 vbabiy joined #salt
02:15 vbabiy joined #salt
02:16 jalaziz_ joined #salt
02:18 oz_akan joined #salt
02:18 harkx joined #salt
02:19 vbabiy joined #salt
02:20 ajolo joined #salt
02:26 oz_akan joined #salt
02:28 joehillen joined #salt
02:38 zandy joined #salt
02:41 tkharju joined #salt
03:19 jaimed joined #salt
03:23 techdragon joined #salt
03:27 ghartz joined #salt
03:27 oz_akan joined #salt
03:28 bchung joined #salt
03:32 vbabiy joined #salt
03:35 vbabiy joined #salt
03:36 conan_the_destro joined #salt
03:45 bhosmer joined #salt
03:50 bhosmer_ joined #salt
03:53 milky joined #salt
03:53 mapu joined #salt
03:54 otter768 joined #salt
04:17 gmoro joined #salt
04:20 taterbase joined #salt
04:26 fannet joined #salt
04:26 fannet hi there - I would like salt to setup stunnel on my minions but generate a unique key pair if it hasn't already done so - could anyone provide me some guidance around the keypair aspect
04:28 oz_akan joined #salt
04:38 ramishra joined #salt
04:41 mosen joined #salt
04:47 beneggett joined #salt
04:56 ramteid joined #salt
04:57 ramteid joined #salt
05:02 deepz88_ joined #salt
05:02 stephanbuys joined #salt
05:03 ajprog_laptop1 joined #salt
05:11 joehillen joined #salt
05:18 CeBe joined #salt
05:18 deepz88 joined #salt
05:29 oz_akan joined #salt
05:33 Ryan_Lane joined #salt
05:37 TyrfingMjolnir joined #salt
05:39 bhosmer joined #salt
05:40 bchung joined #salt
05:41 Sauvin joined #salt
05:49 roolo joined #salt
05:59 ajolo joined #salt
06:04 ndrei joined #salt
06:12 ramishra joined #salt
06:22 jhauser joined #salt
06:24 saravanans joined #salt
06:29 oz_akan joined #salt
06:34 ramishra joined #salt
06:43 UtahDave joined #salt
06:43 UtahDave left #salt
06:53 badon joined #salt
06:56 ghartz joined #salt
06:57 dimeshake_ joined #salt
06:59 ndrei joined #salt
07:05 vu joined #salt
07:13 ml_1 joined #salt
07:14 linjan joined #salt
07:15 matthiaswahl joined #salt
07:16 schimmy joined #salt
07:19 linjan joined #salt
07:19 schimmy1 joined #salt
07:21 Sway joined #salt
07:21 Outlander left #salt
07:27 bhosmer joined #salt
07:27 deepz88 joined #salt
07:28 repl1cant joined #salt
07:30 oz_akan joined #salt
07:30 ramishra joined #salt
07:33 Katafalkas joined #salt
07:34 mechanicalduck_ joined #salt
07:36 Katafalkas joined #salt
07:38 chiui joined #salt
07:41 micko joined #salt
07:43 alanpearce joined #salt
07:45 thehaven joined #salt
07:49 saravanans joined #salt
07:51 luette joined #salt
07:52 topochan joined #salt
07:55 saravanans joined #salt
07:56 oz_akan joined #salt
07:59 saravanans joined #salt
08:00 saravanans joined #salt
08:05 sectionme joined #salt
08:15 saravanans joined #salt
08:17 saravana_ joined #salt
08:19 tinuva joined #salt
08:20 xsteadfastx joined #salt
08:23 Katafalk_ joined #salt
08:24 Lomithrani joined #salt
08:24 lietu joined #salt
08:26 Lomithrani Hi guys , how should I do if I want stop a service before executing a state if it exist but this service needs the state to be running.
08:26 lietu I can't find any real examples of how to write e.g. a bash script that would produce output suitable for cmd.run with stateful: True .. the docs say it should produce json or key=value -pairs, but it doesn't say which ones .. I tried to do "result=True\ncomment=My comment" and I get "Failed parsing script output!"
08:27 Lomithrani In other word before running my service  I need to compile something , for some reason I sometime need to recompile but before recompiling I need to stop the service
08:27 Lomithrani and of course the first time I compile I should not stop the service (as it doesnt exist yet)
08:28 lietu Lomithrani: it'd probably be easiest to write a custom state or script for that kind of conditionalities?
08:28 Lomithrani how should I do that ?
08:29 lietu there's information on the net about writing custom states, iirc you can call other states from your custom states quite easily, so you should be able to use the state system to e.g. install your package after shutting down the service (if it exists)
08:29 lietu but writing states is done in python, if that's an issue, you can write a bash script and just cmd.run that?
08:30 poogles joined #salt
08:30 lietu but yea, I had something sort of similar myself, a bit more complicated setup I wanted to do with salt, and I wrote a bash script, now I'm just struggling to get it to work with the stateful: True -setting
08:38 KaaK_ joined #salt
08:42 lietu oh, it seems the format isn't name=value\nname2=value2, it's name='value' name2='value2'
08:42 lietu damnit
08:42 lietu that makes very little sense, but let me try that
08:44 lietu ok, that seems to work perfectly .. I must've been blind when looking at the docs
08:45 Katafalkas joined #salt
08:48 cetex joined #salt
08:50 ramishra joined #salt
08:56 saravanans joined #salt
08:57 oz_akan joined #salt
08:59 xzarth joined #salt
09:04 babilen Lomithrani: You want to define a prerequisite
09:06 Lomithrani babilen: Thanks !
09:06 Katafalk_ joined #salt
09:06 Katafalk_ joined #salt
09:11 Lomithrani babilen: no it doesn't work :(
09:11 Lomithrani because the first time it won't execute it
09:13 babilen What have you done exactly, what happened and what did you expect to happen? Provide relevant information on a pastebin such as http://refheap.com or http://paste.debian.net
09:16 Lomithrani I've tried something else , just tell you if it works then pastebin ;)
09:16 babilen sure
09:16 bhosmer joined #salt
09:16 Lomithrani babilen: thanks again !
09:17 babilen The question I ha(d|ve) with your question was "if it exists". It is both unclear what "it" refers to and what "it exists" means exactly.
09:17 babilen *The problem I ...
09:20 babilen It sounded as if a prerequisite was applicable in that situation (only do FOO if BAR has changes)
09:20 darkelda joined #salt
09:20 jhauser joined #salt
09:22 Lomithrani babilen: https://www.refheap.com/88570   So I want to do a stage the first time I commit the git ,  to launch the service I need the stage to be done. If there is change in the git I need to stop the service (can't stage with the service launched)
09:22 babilen What do you mean by "commit the git" ?
09:22 Lomithrani So if I only watch  when I stop the service, obviously it won't work the first time I pull
09:22 Lomithrani pull the git , if I have change in my repo
09:23 Lomithrani the problem is when to run "clean stage"
09:23 saravanans joined #salt
09:24 Lomithrani Recursive requisite found
09:24 Lomithrani atm  with the exact state file I sent you
09:25 babilen ah, so many lines ... so much state to construct in my head :)
09:26 Lomithrani git latest , kill app , clean stage , application/advertising  are really the only one that matter here
09:26 babilen Give me some minutes please. I'll ping :)
09:26 Lomithrani K thank you !
09:28 scott_w joined #salt
09:28 Lomithrani oh and clean stage is a cmd.wait usually , I just set it at run because I really wanted it to run
09:29 babilen Lomithrani: First I would use "service.dead" rather than cmd.run + service.stop ..
09:29 Lomithrani I was scared , as it's the same service as used latter
09:29 Lomithrani that it would conflict
09:31 N-Mi joined #salt
09:32 Lomithrani oh yeah and service dead had another issue it wouldn't trigger the wait after or something like that (don't remmeber exactly)
09:32 babilen Just something small I noticed
09:33 babilen I use service.dead to stop a service in case changes to one of its dependencies will be made.
09:33 tinuva joined #salt
09:34 babilen Did I understand you correctly in that you want to stop the service prior to recompiling (i.e. triggered by changes in git) and then ensure that the service is running after the whole "compiling" pipeline is done?
09:36 Lomithrani yes
09:36 Lomithrani but that would be easy
09:36 Lomithrani the tricky part
09:36 Lomithrani is the first time I launch the state
09:36 Lomithrani and the service doesn't exist yet
09:37 babilen (it's okay to write long sentences and use punctuation, increases information density and, IMHO, readability)
09:38 babilen Well, in that case the service.dead would fail, the compilation would do its thing and the last service.running would start it.
09:39 Lomithrani How could I do that if the the service.dead fail I do the compilation, but if it succeeds I need to do the compilation after the service.dead succeded ?
09:41 Lomithrani Should I just do a service.dead and follow it by a cmd.run for the compiling instead of a cmd.wait ?
09:41 babilen The compilation should be triggered whenever there are changes in the git state. (i.e. compilation-state watched git-state). The service-dead state defineds a prereq on the compilation state so that it gets triggered when that one is triggered (by changes in git). For the first time that service.dead would fail (as there is no such service, but that's fine IMHO)
09:42 babilen Lastly you want to require all those states from the service.running state to ensure that that state is always executed last
09:43 Lomithrani Ok , I'll do that , I will tell you how it goes , Thanks a lot again !
09:45 giantlock joined #salt
09:46 kivihtin joined #salt
09:47 babilen And you need cmd.wait if you want to use watch statements (and not run it every time)
09:54 ramishra joined #salt
09:57 Lomithrani Babilen: Yep I told you about that above , the run was just because I was in a hurry to make it compile (ppl waiting for my environment for tests) , haven't done all the test case , but it's up and running so it should be good . Thanks a lot Babilen !
09:58 oz_akan joined #salt
09:58 babilen \o/
09:59 babilen So, it works now? Sorry, I could have given more specific advice, but thought I'd rather explain my "mental model" and let you do the hard work ;)
10:01 bhosmer joined #salt
10:05 geekmush joined #salt
10:05 tkharju1 joined #salt
10:11 Lomithrani babilen: I much rather like mental model so I'm sure I understand the process properly and will be able to adapt it next time ;)
10:11 Lomithrani I had never used prereq , no I get it how usefull it is :)
10:15 Outlander joined #salt
10:26 tkharju2 joined #salt
10:27 urtokk joined #salt
10:37 mosen joined #salt
10:41 ghartz joined #salt
10:46 tkharju3 joined #salt
10:48 jalaziz joined #salt
10:58 oz_akan joined #salt
11:06 rcsheets joined #salt
11:07 fxdgear joined #salt
11:07 tkharju4 joined #salt
11:07 duncanmv joined #salt
11:08 duncanmv hi folks, two questions: does salt support maintenance windows? that is, setting up in the master when the minion can apply changes to the state?
11:08 rblackwe joined #salt
11:08 dcolish joined #salt
11:09 duncanmv and second question? is there functionality to get from the master or any API the differences between the desired state and the current state of the minion but not automatically apply it?
11:12 ekristen joined #salt
11:13 viq duncanmv: 1) I don't think so. 2) state.highstate test=True comes to mind
11:14 duncanmv viq: how it is controlled how often the minions apply changes, or is it always "instant" as soon as the state changes on the master?
11:16 viq duncanmv: no, it's when you tell them to
11:17 viq duncanmv: you need to tell nodes explicitly to apply state.highstate or whatever state you want. Or you could set a schedule that would do that, but they won't do it themselves just because they're connected to salt
11:18 ramishra_ joined #salt
11:19 TheThing joined #salt
11:19 duncanmv viq: ah cool that is great
11:22 vbabiy joined #salt
11:25 ramishra joined #salt
11:25 albertid joined #salt
11:26 albertid Hi, can I easily filter my pillar data to send only a part of it to the servers?
11:26 albertid e.g. if I want to update only a subset of it
11:33 ramishra joined #salt
11:34 ramishra_ joined #salt
11:37 saravanans joined #salt
11:41 babilen duncanmv: All changes have to be made *explicitly*. The master can, however, be configured to react to certain events or to schedule actions (including running a highstate)
11:45 ml_1 looking for managing perl modules with salt. Any ideas besides cmd-run ?
11:45 saravanans joined #salt
11:45 duncanmv babilen: thanks, that is useful
11:47 TheThing joined #salt
11:47 duncanmv so does state.highstate test=True gives any information back about the needed actions?
11:51 viq yes, it shows would would have been done, and what would not need to be done
11:53 saravanans joined #salt
11:59 babilen duncanmv: It will list all states that will be run and their respective changes (as far as salt knows them)
11:59 oz_akan joined #salt
12:02 duncanmv babilen: but if it is called from the python api, then one can get a py structure with that information right?
12:02 duncanmv babilen: (I am looking it from the POV of integrating salt with another product and not so much of calling from the command line)
12:02 babilen Which call are you referring to exactly?
12:03 duncanmv state.highstate test=True
12:03 babilen States return a specific dictionary that contains keys such as 'changes' (and so on, cf. http://docs.saltstack.com/en/latest/ref/states/writing.html)
12:03 babilen duncanmv: Yes, which API call are you referring to?
12:04 babilen Are you talking about the REST web api? Or do you want to write something else that uses salt directly from within Python and you are not yet sure which API exactly to use for that?
12:07 duncanmv babilen: both are good options if they exist. If another component integrates with salt, I guess rest api is more generic, but using python directly is also good.
12:09 babilen duncanmv: So you are, as of now, simply evaluating salt for your needs?
12:10 babilen https://github.com/saltstack/salt-api is what I am referring to, it'll be in the next release (Helium)
12:10 duncanmv babilen: yeah
12:12 darkelda joined #salt
12:13 babilen duncanmv: I cannot make comments on the suitability of salt as an API. From what I've seen of the code nothing screams "This can't be done", but I would write to salt-users and wait for actual answers. You also run into the danger that you are coding against an undocumented API/implementation specifics that might change.
12:14 duncanmv babilen: thanks
12:20 diegows joined #salt
12:21 diegows hi
12:22 miqui joined #salt
12:23 mapu joined #salt
12:32 ihasn joined #salt
12:32 luminous joined #salt
12:35 higgs001 joined #salt
12:35 ihasn can anyone give me some insight on the best way to go about this.  Currently I use salt to auto provision nagios service definitions while it provisions the rest of the vm but I sync the nagios def via an nfs mount.  I am looking to do it via salt's built in transfer medium but not fully sure on where to go with that.
12:36 therealGent joined #salt
12:36 therealGent are there any plans on integrating salt with the Foreman/
12:36 viq therealGent: I believe work is ongoing, no idea about progress though
12:36 ihasn i am able to via commandline past the completed config from the minion to the master but not via a salt state
12:37 ggoZ joined #salt
12:37 viq ihasn: I'm not entirely sure what exactly you're trying to do
12:39 ihasn viq: neither am i.  i guess i should start with how does cp.push translate to a salt state file?
12:40 viq well, that's the first thing that wasn't clear from what you said - you're trying to move stuff from minions to master
12:40 ihasn correct
12:41 viq why?
12:42 viq well, for one there's http://docs.saltstack.com/en/latest/ref/states/all/salt.states.module.html
12:42 viq But it would be good if you could explain your thinking, maybe there's another way to go about it
12:43 ihasn generating nagios host def while a machine is being provisioned.  I don't know of any other way to properly generate the host def then on the minion via a modified nrpe module
12:43 Flashtek left #salt
12:43 ihasn so once the hostdef is created i use nfs to get it to my nagios host
12:44 ihasn nagios reloads and the host is found
12:45 viq what do you put in such a definition?
12:45 ihasn its a text definition that looks like http://nagios.sourceforge.net/docs/3_0/objectdefinitions.html#host
12:46 viq Because maybe mine or publish interface would suffice for that
12:46 viq What kind of information do you put in there that is node specific?
12:47 ihasn i am sure I am going about it the wrong way to a better option using grains would be something i would also be interested in.  as for the kind of information that is node specific.  any vms that run an httpd server get a specific check, redis gets a specific check, etc.
12:47 viq Do you set those up via salt?
12:48 ihasn the majority of vms get checks for load, users, disk space, etc.
12:48 ihasn yes the various roles are set via salt
12:48 viq So yeah, stuff that's available in grains (ip, hostname, etc) you could do via mine or publish, without having to move stuff from minions
12:49 viq If salt knows about stuff running on the node, there should be a way to get that information as well without having to move stuff from the minion
12:49 vbabiy joined #salt
12:50 ihasn i figured there was a better option then what i was considering.  thanks viq
12:52 mpanetta joined #salt
12:55 brunolambert joined #salt
12:57 vejdmn joined #salt
12:58 albertid_ joined #salt
13:07 jslatts joined #salt
13:09 scoates_ joined #salt
13:11 FeatherKing joined #salt
13:14 notpeter_ joined #salt
13:15 blarghmatey joined #salt
13:16 intellix joined #salt
13:19 bhosmer joined #salt
13:22 oz_akan joined #salt
13:22 saravanans joined #salt
13:22 yomilk joined #salt
13:23 babilen Shouldn't "salt 'web[100,101]' test.ping" not match web100 and web101 ?
13:24 m0nky joined #salt
13:25 Corey joined #salt
13:27 kermit joined #salt
13:28 Supermathie joined #salt
13:28 ndrei joined #salt
13:28 arthabaska joined #salt
13:30 pclermont joined #salt
13:32 racooper joined #salt
13:34 yomilk joined #salt
13:35 yomilk joined #salt
13:40 eliasp babilen: tried to use 'salt -C 'E@web[100,101]' test.ping'?
13:41 eliasp babilen: the default is IIRC only wildcard…
13:41 eliasp babilen: … but not regex
13:42 mapu joined #salt
13:42 cetex left #salt
13:45 Lomithrani duh , very stupid question but I can't find my way in the docks. I've always executed my state with state.highstate, can I execute one directly ? like # salt Exemple   exemple.reboot    where   reboot would be in salt/states/exemple/reboot.sls ?
13:47 babilen eliasp: I just wanted to verify if that was intentional .. I think this follows normal bash globbing, but the documentation allows for other interpretations
13:47 babilen (i.e. it simply uses fnmatch)
13:48 eliasp ah, ok… docs might need some improvement here then…
13:48 aquinas joined #salt
13:48 khodgson joined #salt
13:48 FeatherKing Lomithrani: salt 'server' state.sls example.reboot
13:48 Lomithrani FeatherKing thanks
13:48 Kalinakov joined #salt
13:49 Yoda-BZH joined #salt
13:49 yomilk joined #salt
13:49 FeatherKing with state.sls you dont need the sls extension on the file, if you want to run one specific file something like 'salt 'server' state.single file.sls'
13:49 quickdry21 joined #salt
13:49 FeatherKing but you should be able to read on those in the docs
13:50 FeatherKing http://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.state.html#module-salt.modules.state
13:51 Corey joined #salt
13:52 Lomithrani Well I couldn't find it after 5 minutes I figured out I'll ask there
13:53 FeatherKing i just meant you could read further
13:53 giannello joined #salt
13:53 Kalinakov Newbie here. When you first accept the key for a new salt-minion, have it defined in a top.sls file with some items to run, do you have to push the changes out from the master or should the minion notice that it has changes to process and just, do it?
13:55 FeatherKing Kalinakov: the top.sls doesnt run anything it just matches state files to minions
13:55 FeatherKing if thats what you have then you are the one to kickoff the state file
13:55 FeatherKing the minions dont do anything automatically
13:56 FeatherKing you should have a top.sls pointing to another sls
13:56 Kalinakov Ok, I thought I had read that the minions pull information when they check in, or were supposed to.
13:56 aquinas joined #salt
13:56 Kalinakov Yeah I have the hostname and then state files defined under it, but I was expecting the minion to ask for changes.
13:56 FeatherKing they just look for things to do
13:56 giannello Kalinakov, no, minions are only connecting to the master. you can, however, configure the scheduler on the minion
13:56 giannello that way, the minion will request the highstate automatically
13:56 Kalinakov Ok I did not know about the scheduler, that's probably what I'm looking to do.
13:57 Kalinakov Right on, thanks folks.
13:57 FeatherKing when the minions start it will reread its own grains and i think look for pillar data but nothing else
13:57 dude051 joined #salt
13:57 giannello Kalinakov, I'd suggest, since you are new with salt, to avoid that
13:57 geekmush joined #salt
13:57 Kalinakov This is literally day one for me, moving from chef to salt. I'm just thankful they communicate at this point.
13:57 giannello simply push a highstate from the master manually, and verify the result before applying
13:59 Ruth joined #salt
14:02 kaptk2 joined #salt
14:03 Ruth Hi all
14:03 aquinas joined #salt
14:03 giannello Kalinakov, enjoy it - the learning curve is not so steep, I'm successfully managing around 30 hosts on a pretty complex AWS setup without any issue so far
14:04 penguin_dan joined #salt
14:04 tkharju joined #salt
14:04 zandy joined #salt
14:08 Ruth Anyone knows if this setting : http://docs.saltstack.com/en/latest/ref/configuration/master.html#yaml-utf8 should also work on the minion configuration file please ?
14:09 Ruth I am running Salt masterless btw.
14:13 masterkorp General jinja question
14:13 masterkorp can i have a full condition on multile escape caracter ?
14:15 masterkorp http://pastie.org/private/i6xwnht9jubzae34oov9aw
14:15 masterkorp like this ?
14:15 masterkorp Comment: Unable to manage file: Jinja syntax error: expected token 'end of statement block', got 'rabbit_server'; line 3
14:15 masterkorp this produces
14:17 UtahDave joined #salt
14:17 UtahDave left #salt
14:18 viq masterkorp: why not salt['pillar.get']('sensu:client:rabbit_server', 'fuckuck') ?
14:19 TheThing joined #salt
14:19 ramishra joined #salt
14:23 saravanans joined #salt
14:26 masterkorp just curious really
14:28 viq masterkorp: also I believe each line of what you pasted should be it's own {% %} block
14:28 masterkorp yeah that is my question
14:28 viq I didn't get that's what you're asking from what you said ;)
14:29 masterkorp can i have conditionas on their own block
14:30 giannello masterkorp, yes - you have to explicitely terminate them with "endif"
14:30 viq I don't know much about jinja, but all the examples that I remember split such stuff, didn't lump it together like you did
14:30 giannello but viq is right, and also the pillar[] syntax shouldn't be used
14:31 intellix joined #salt
14:32 penguin_dan joined #salt
14:38 badon_ joined #salt
14:44 bhosmer joined #salt
14:58 rallytime joined #salt
15:00 vexati0n joined #salt
15:01 cingeyedog joined #salt
15:02 khaije1 joined #salt
15:05 thedodd joined #salt
15:06 conan_the_destro joined #salt
15:07 doddstack joined #salt
15:08 Yoda-BZH joined #salt
15:10 jalbretsen joined #salt
15:12 khodgson joined #salt
15:13 donnyk joined #salt
15:13 matt_____ joined #salt
15:15 sergiotocalini joined #salt
15:15 donnyk Hi, can someone help me with a jinja template?  I'm trying to put several configuration lines into a file using for loop but the syntax is incorrect.  http://pastebin.com/uXnLFYdC .  It's treating disk variable as a string, not a structure and I can't use .get()
15:15 vejdmn joined #salt
15:16 ipmb joined #salt
15:16 jaimed joined #salt
15:17 masterkorp need spaces on {{ disk }}
15:19 SpeeR if I have 2 roles specified in the minion config, do I have to successfully match both of these in my jinja template
15:20 SpeeR I have grains: roles: -sweb -prod
15:20 SpeeR and in my init.sls I have this {% if grains['roles'] == 'sweb' %}
15:21 donnyk thanks, i put the spaces in.  But "disk" variable is still treated as a string
15:21 alanpearce joined #salt
15:25 donnyk what's the difference between "item:" and "  - item:"?  What does the dash mean?
15:27 higgs001 joined #salt
15:29 gwmngilfen joined #salt
15:29 Katafalkas joined #salt
15:36 yaru22 joined #salt
15:45 ghartz joined #salt
15:53 beneggett joined #salt
15:57 robawt donnyk: the dash implies a list item
15:58 robawt donnyk: http://salt.readthedocs.org/en/latest/topics/yaml/
15:58 robawt donnyk: remember that salt uses a _subset_ of YAML, so not all YAML is salt-readable
15:59 tligda joined #salt
16:09 KyleG joined #salt
16:09 KyleG joined #salt
16:15 sergiotocalini left #salt
16:17 badon joined #salt
16:18 laubosslink joined #salt
16:20 robawt laubosslink: I believe it's in the developer docs, but you should re-read the part in the docs about renderers
16:20 robawt laubosslink: http://docs.saltstack.com/en/latest/ref/renderers/index.html
16:21 robawt """SLS files are translated from whatever data templating format they are written in back into Python data types to be consumed by Salt."""
16:22 robawt laubosslink: i'm sorry it doesn't directly answer your question, but it's a good start into what you'll need
16:24 jcockhren does anyone have setup with salt-cloud that spawns jenkins slaves as spot instances?
16:24 Katafalkas joined #salt
16:25 * robawt highfives fxdgear
16:25 * robawt highfives fxhp **
16:25 * fxdgear highfives robawt back
16:25 robawt :D
16:28 Comradephate joined #salt
16:31 beneggett joined #salt
16:32 cingeyedog joined #salt
16:33 ifmw joined #salt
16:33 troyready joined #salt
16:34 ramishra joined #salt
16:38 ramishra joined #salt
16:39 schimmy joined #salt
16:41 pclermont_ joined #salt
16:42 schimmy1 joined #salt
16:51 Ryan_Lane joined #salt
16:56 rap424 joined #salt
17:01 bmatt is there a way to optionally pass/use a parameter in a templatized file?
17:02 bmatt maybe "- default:\n    foo: False" and in the file do {% if foo is not False %}{{foo}}{% endif %}?
17:03 forrest joined #salt
17:04 FeatherKing thats pretty much it
17:05 FeatherKing the jinja docs on their site have some helpful syntax examples
17:07 beneggett joined #salt
17:07 bmatt hm.
17:07 pclermont_ joined #salt
17:07 kermit joined #salt
17:08 bmatt weird, there seems to be some odd interaction between the default key, the context key, and the 'is not defined' test in jinja
17:09 FeatherKing try not 'is not' to !=
17:09 FeatherKing 'False'
17:09 conan_the_destro joined #salt
17:09 bmatt well, so passing 'False' in the yaml doesn't result in a False value, it results in the string 'False' :)
17:10 FeatherKing yeah i remember there is some crazy interpretation between jinja and yaml
17:10 FeatherKing with bool
17:10 bmatt oh awesome. so default: False makes 'is defined' test false
17:10 bmatt but context: False makes 'is defined' test True
17:11 athe joined #salt
17:11 FeatherKing whiteinge explained it to me a while ago but i cant remember the rules
17:11 jaimed joined #salt
17:11 FeatherKing jinja is always rendered first, but yaml tries to help and you can get around it
17:11 FeatherKing cant quite remember
17:12 jaimed joined #salt
17:12 Katafalk_ joined #salt
17:17 cingeyedog joined #salt
17:17 cingeyedog joined #salt
17:17 joehillen joined #salt
17:18 bmatt I went ahead and filed https://github.com/saltstack/salt/issues/14496
17:18 davet joined #salt
17:23 bhosmer joined #salt
17:25 Comradephate joined #salt
17:27 topochan joined #salt
17:29 alainv cheese: tasty     omelet: du fromage
17:29 alainv Hah! Props to whoever's sense of humour got into the salt-cloud docs.
17:32 ramishra joined #salt
17:34 ramteid joined #salt
17:35 murat-sfdc joined #salt
17:39 bmatt git blame! =D
17:40 SpeeR having a problem with my jinja salt -C "(G@env:prod and (G@roles:sweb or G@roles:sws))" state.sls prod.etc.syslog-ng
17:41 SpeeR this is updating minions with the roles:sws but not env:prod
17:49 Gareth morning
17:49 forrest hey Gareth
17:49 Gareth Hey forrest, hows it going?
17:49 forrest Gareth, it's Friday
17:50 forrest so wooooooooo
17:50 Gareth :)
17:50 Gareth TGIF!
17:50 forrest I know
17:50 druonysus joined #salt
18:00 khaije1 joined #salt
18:03 ml_1 joined #salt
18:15 Alan_S joined #salt
18:16 jimp joined #salt
18:16 Comradephate joined #salt
18:16 cingeyedog joined #salt
18:16 jimp good afternoon
18:16 jimp i am wondering if there is a tutorial available
18:16 forrest hello
18:16 jimp for complete newbees to server administration
18:17 forrest jimp, Uhh I don't think there is a tutorial for people who are brand new sysadmins
18:17 cingeyedog joined #salt
18:17 forrest jimp, have you checked out the main tutorial to see if it works for your use case?
18:18 jimp i've read through http://docs.saltstack.com/en/latest/topics/tutorials/walkthrough.html
18:18 forrest ok
18:18 bhosmer_ joined #salt
18:18 jimp :aaa: just got called to a meeting
18:29 schimmy joined #salt
18:33 ramishra joined #salt
18:33 schimmy2 joined #salt
18:35 khodgson joined #salt
18:38 stevebrownlee joined #salt
18:39 chrisjones joined #salt
18:42 untamo13 joined #salt
18:44 untamo13 do included states get run multiple times if they are already being run elsewhere? e.g. suppose i have one/init.sls and two/init.sls. and the base environment runs both one and two. if i have also included one at the top of two, will one be run twice on a highstate?
18:47 kermit joined #salt
18:51 dimeshake you'll likely get duplicate ID errors
18:52 dimeshake it will try to run them twice but fail, iirc
18:52 forrest dimeshake, I believe that was actually fixed
18:52 dimeshake ah. in helium, or 2014.1.x?
18:52 forrest at the very least I remember there was an issue for this
18:52 forrest pretty sure it was a few releases ago
18:53 forrest but I could be wrong, I don't remember the issue ID :\
18:53 nyx joined #salt
18:53 forrest untamo13, I'd say just test it
18:54 dimeshake untamo13: salt 'minion' state.highstate test=True :)
18:55 untamo13 thank you for the feedback all -- when i tested it, it seems like it is not running them twice from the output -- i was just hoping for some independent verification before i made some significant state tree changes which depend on it :)
18:56 khodgson joined #salt
18:58 forrest untamo13, cool
18:59 roolo joined #salt
18:59 untamo13 one other question -- has anyone else experienced permission issues when running an sls using state.orchestrate but not when calling the same sls from highstate? i haven't seen any issue reports but that seems to be what i am experiencing.
19:01 untamo13 i'm running 2014.1.7 and they are both file.managed calls on files owned by root. my master runs as a non-root user, minion is running as root
19:14 peters-tx joined #salt
19:14 forrest untamo13, nope, haven't messed with orchestrate lately. You might double check to see if there is an issue open
19:14 forrest before diving in too deep
19:14 khodgson joined #salt
19:19 jaimed joined #salt
19:20 saravanans joined #salt
19:24 talwai joined #salt
19:25 badon joined #salt
19:26 talwai Is there a salt-runner to run a simple shell command on the master? I am looking to trigger this command via an event+reactor setup. Alternatively, can a cmd.run state in a reactor file simply take target 'local' ?
19:27 jimp forrest, sorry for running in and jumping away so quickly
19:27 jimp i am still interested in learning saltstack, but i am not a sysadmin
19:27 forrest jimp, no worries, IRC responses aren't paying the bills
19:27 forrest jimp, I see.
19:28 jimp but, i have been tasked with running my company's cloud infrastructure
19:28 jimp i mean, i know how to set up a server with basic things
19:28 forrest jimp, what is your level of experience?
19:28 forrest jimp, for a linux system?
19:28 jimp build a lamp stack, or an nginx/django web server
19:28 forrest jimp, ok
19:28 jimp i can do basic things i think
19:28 forrest jimp, if you can do that, you can probably use Salt
19:29 rypeck random comment - docs.saltstack.com should have a cool 404 page
19:29 forrest jimp, you should take a look at: http://hungryadmin.com/building-a-static-blog-and-deploying-it-with-saltstack.html
19:30 forrest jimp, it doesn't have all the commands, but I wrote that as a 'beginner' tutorial
19:30 rypeck perhaps a periodic table with the Na and Cl removed
19:30 forrest rypeck, that's... really cheesy
19:31 rypeck forrest: I'm really good at cheesy
19:31 rypeck Get's the brainstorming process going
19:31 bmatt I'd prefer an ordered list of most-visited terminal links :)
19:31 bmatt "We can't find that, but here's what's popular: "
19:32 zandy joined #salt
19:32 rypeck perhaps a nice image of the Bonneville Salt Flats?
19:32 forrest rypeck, a picture of a fresh water lake :P
19:32 forrest salt not found, please try again
19:33 rypeck yea but how do you know it's a freshwater lake?
19:33 rypeck an empty salt shaker next to pepper?
19:33 ramishra joined #salt
19:35 talwai Is there a salt-runner to run a simple shell command on the master? I am looking to trigger this command via an event+reactor setup. Alternatively, can a cmd.run state in a reactor file simply take target 'local' ?
19:36 cotz joined #salt
19:37 cotz left #salt
19:37 forrest rypeck, how about just NA
19:43 rypeck Nested for loops are okay in .sls right?
19:44 eliasp rypeck: yes
19:49 arthabaska joined #salt
19:49 beneggett joined #salt
19:50 vejdmn joined #salt
19:52 whiteinge talwai: this is what i usually do (because using subprocess directly sucks) http://paste.fedoraproject.org/120902/63179201
19:52 whiteinge ^^ (untested)
19:52 m0nky joined #salt
19:55 forrest rypeck, try to get too crazy with jinja inside states if you can avoid it. I did a whole talk on that :P
19:56 forrest rypeck, err try not to get too crazy
19:56 forrest Friday = cannot type day apparently
19:59 rypeck forrest: link?
20:00 forrest rypeck, https://www.youtube.com/watch?v=OCbtD2r7bPo
20:00 rypeck I'm as crazy as I'll get. Hopefully this will be open source and you can tell if it's too crazy
20:00 forrest rypeck, lol ok
20:00 forrest I'm not great at talking, let me find the slides..
20:00 Gareth forrest: do you know about http://seagl.org/?
20:00 forrest rypeck, http://www.slideshare.net/SaltStack/forrest-alvarez-salt-formulas-and-states-salt-conf-32725456
20:00 forrest Gareth, yes I already submitted a talk
20:00 rypeck ah yea the saltconf video doesn't do the slides nice
20:01 Gareth forrest: ah nice.  I was planning on submitting one as well.
20:01 forrest rypeck, yea that window in the back was a bit of a killer :P
20:01 forrest Gareth, oh yea?
20:01 forrest that would be cool
20:01 forrest the guy sitting across from me designed the website
20:01 rypeck forrest: you can do videos for cons like that where you record the slide video and the speaker at the same time. then merge them nicely together.
20:01 forrest so he knows the organizers
20:01 rypeck *then
20:01 Gareth forrest: yeah.  Was thinking about something related to Salt and the schedule related additions I've added recently.
20:01 forrest rypeck, yea, this was the first saltconf so still getting things down
20:02 forrest Gareth, that would be cool, my talk is about contributing to open source projects, so we wouldn't overlap
20:02 forrest Gareth, though I don't know if anyone is going to do a 'salt basics' talk
20:02 zandy joined #salt
20:02 forrest I just didn't feel like doing that since I've seen it covered quite a bit
20:03 felskrone joined #salt
20:03 forrest and I don't want to submit two talks that's for sure, lol
20:03 forrest Gareth, keep in mind talk registration closes on Sunday I believe
20:04 Gareth forrest: was planning to submit this weekend but I asked in #seagl and they had mentioned that they were going to extend it.
20:09 HK_ joined #salt
20:10 aw110f joined #salt
20:12 badon joined #salt
20:15 khodgson joined #salt
20:16 schimmy joined #salt
20:18 schimmy1 joined #salt
20:28 Katafalkas joined #salt
20:32 zandy joined #salt
20:34 ramishra joined #salt
20:34 zandy_ joined #salt
20:37 FeatherKing is this valid jinja to grab a date 30 days from now
20:37 FeatherKing {{ datetime.today()+timedelta(days=30)|strftime(%m/%d/%Y %I:%M:%S) }}
20:38 khaije1 joined #salt
20:43 mspah_ joined #salt
20:49 allanparsons joined #salt
20:49 mindKMST joined #salt
20:49 allanparsons any idea why a publish.publish would work manually, but not in a state?
20:51 allanparsons see: http://pastebin.com/7tmgApyt
20:52 murat-sfdc hey guys quick question
20:52 allanparsons (note... i also did ec2_apps:* as well)
20:52 murat-sfdc is there a way salt rest api returns function 'return code' in addition to its output?
20:52 murat-sfdc as in print a bunch of commands and return success/failure codes?
20:53 murat-sfdc Currently I see only return: in response, which includes job output
20:53 murat-sfdc but not a separate return code: 0/1/255/..
20:54 estherbester joined #salt
20:55 retrospek a wild esther appears
20:55 TheThing joined #salt
21:01 viq joined #salt
21:01 khodgson joined #salt
21:02 Fa1lure joined #salt
21:05 retrospek allanparsons: is that the actual output of that state? the IDs don't match (test-127.0.0.1 should be test-foo-127.0.0.1 right?)
21:05 allanparsons i tried to obscrue my domain
21:05 allanparsons that's the correct state
21:06 allanparsons sorry.
21:06 allanparsons well, yeah
21:06 allanparsons weird
21:06 allanparsons i see
21:06 allanparsons good catch
21:06 allanparsons lemme re-run
21:07 allanparsons retrospek: i was missing a few lines: http://pastebin.com/QdL7LezS
21:08 forrest Gareth, sorry was at lunch, that's cool if they extend it
21:08 retrospek ok that makes more sense. i was wondering wtf 'cluster member' came from heh
21:08 forrest but they don't require a ton of details, I was able to put something together in about 10 minutes
21:10 eliasp laubosslink: you might be interested in this (see the map.jinja): https://github.com/saltstack-formulas/samba-formula/blob/master/samba/config.sls
21:10 duncanmv joined #salt
21:10 retrospek well clearly your if check is failing. not sure what you're trying to filter on there though
21:13 allanparsons yes, but if i run manually it works.
21:13 retrospek it runs in both
21:13 retrospek what happens when you omit the if filter?
21:14 retrospek seems you're using 'server' other than you intend
21:16 vejdmn joined #salt
21:17 retrospek it looks like you're checking if this nodename is not in the publish list, then add it to the cluster list
21:18 allanparsons joined #salt
21:18 allanparsons let me omit the if
21:18 m0nky joined #salt
21:18 retrospek allanparsons: it looks like you're checking if this nodename is not in the publish list, then add it to the cluster list
21:18 allanparsons i ran this manually (salt-call state.sls couchbase.server) and i got expeted output.
21:18 retrospek yea the publish isn't the problem. it's how you using the result set
21:19 allanparsons no no... what i'm doing is fetching a list of OTHER member servers and appending those IPs to the list if it's not my own IP.
21:19 retrospek laubosslink: yea you need to import the state with context and they become globals available in your jinja if templated
21:19 allanparsons so "hey, is there another couchbase cluster I can join?"
21:20 rypeck Is it possible on a salt server for an sls to take a different course of action based on wether or not a file exists on the server?
21:22 allanparsons rypeck - use an onlyif (test -f /path/to/file) or an unless (test -f /path/to/file)
21:22 kermit joined #salt
21:22 rypeck I should clarify - while templating out an sls
21:22 retrospek i think he means testing on the master not minion
21:22 rypeck retrospek: yes
21:22 Katafalkas joined #salt
21:23 Katafalkas joined #salt
21:24 retrospek probably better to use environments if you have situation where a subset of machines shouldn't have the same view of available data
21:24 retrospek though im hazy on whether there's a newer way to handle that situation
21:28 laubosslink joined #salt
21:29 eliasp laubosslink: you might be interested in this (see the map.jinja): https://github.com/saltstack-formulas/samba-formula/blob/master/samba/config.sls
21:29 eliasp laubosslink: … and you should use Quassel or an IRC Bouncer ;)
21:30 eliasp so you only want to target specific values in a file?
21:30 laubossl1nk joined #salt
21:30 eliasp laubosslink: then have a look at http://docs.saltstack.com/en/latest/ref/states/all/salt.states.augeas.html and look for an XML lense for Augeas
21:32 talwai Can I use the py renderer for reactor sls files if my state files are rendered via regular yaml+jinja? The #!py shebang doesn't seem to work in this case
21:32 eliasp laubosslink: Augeas actually comes  with a builtin generic XML lense: https://github.com/hercules-team/augeas/blob/master/lenses/xml.aug
21:34 zandy joined #salt
21:42 KaaK_ when I've not contacted my minions for an extended period of time, sending commands from master will timeout at the CLI.
21:42 KaaK_ When i try again a few minuets later, all minions report in.
21:42 KaaK_ is this normal?
21:55 laubosslink joined #salt
21:55 laubossl1nk joined #salt
21:59 ghartz joined #salt
22:00 ajprog_laptop1 joined #salt
22:02 talwai Can I use the py renderer for reactor sls files if my state files are rendered via regular yaml+jinja? The #!py shebang doesn't seem to work in this case
22:04 ggoZ joined #salt
22:06 kivihtin joined #salt
22:16 allanparsons joined #salt
22:16 allanparsons ok... so on second run, i can get the ip addresses of peers using publish.publish
22:16 allanparsons but i dont get them on the first state.highstate
22:24 ramishra joined #salt
22:33 zandy joined #salt
22:37 eliasp Gareth: WRT #14426
22:37 eliasp you could make your life probably easier using Docker to reproduce this issue… no need to re-install a full machine
22:37 eliasp with Docker you'd have a "fresh" instance available within seconds
22:37 eliasp Gareth: https://docs.docker.com/installation/ubuntulinux/
22:40 ajprog_laptop1 joined #salt
22:44 Sauvin joined #salt
22:45 vexati0n who here lives in the phoenix area and wants a job :P
22:45 Gareth eliasp: yeah. I'm reinstalling an Ubuntu VM now to use as a docker host. :)
22:46 eliasp Gareth: what's your VM host? you can run it natively on nearly any recent Linux…
22:46 eliasp Gareth: do you have previous Docker experience? otherwise I'd give you a quick Docker primer…
22:46 Gareth eliasp: Xen.
22:46 Gareth Never used Docker.
22:47 Gareth VM host is Debian.
22:47 eliasp ok, then you can install Docker just right on Debian as well…
22:47 eliasp no need for an extra layer (VM) inbetween ;)
22:50 Gareth VM host is Squeeze, probably not supported.
22:50 eliasp ok, yes… Squeeze is probably too old, as it needs some recent Kernel features
22:57 eliasp once you have Docker installed, all you need to do is to execute:
22:57 eliasp docker run --interactive --tty library/ubuntu:14.04 /bin/bash
22:57 eliasp this will give you a shell inside a Ubuntu 14.04 container
22:57 forrest Gareth, just use LXC, even easier than docker
22:57 eliasp … or systemd-nspawn ;)
22:58 forrest lol
22:58 forrest eliasp, at least docker is built on lxc
22:58 eliasp -nspawn is awesome… especially when it comes to replace what's been run as chroot until now
22:59 khaije1 eliasp: what sort of thing are you using it for?
22:59 eliasp -nspawn … for Gentoo chroots
22:59 eliasp no need to mount /sys, /proc, /dev, … inside the chroot anymore
23:00 eliasp … being able to run services natively inside the "chroot"
23:00 eliasp and a lot more
23:00 eliasp my personal infrastructure is 100% Gentoo
23:03 btorch anyone know the special way to pass this through salt ?
23:03 btorch cmd.run  "sudo sed  '/roles/,$d' /etc/salt/minion"
23:03 btorch I've tried a bunch of stuff already
23:03 eliasp btorch: what about file.replace?
23:05 eliasp … besides that, I probably wouldn't assign roles on the Minion, as this would make it possible for a possibly "hijacked" Minion to assign any role to itself and therefore exposing possibly secret data from other pillars to it…
23:05 londo_ joined #salt
23:06 btorch you mean the minion file ?
23:06 eliasp the Minion should have never control over anything… all control needs to be within the Master through top.sls/Pillar assignments
23:06 eliasp yes
23:07 * goodwill push whiteinge down and runs away
23:07 btorch yeah not sure that would work on our setup
23:08 eliasp … also depends on what kind of services you expose from your Minions to the outside
23:08 eliasp if your Minions don't really talk to the outer world, having them "hijacked" is rather unlikely
23:08 eliasp … if they're webhosts… I'd handle that with care ;)
23:10 vexati0n btorch: when I get into "cmd.run doesn't work right" issues I just write it into a script that would work if run locally and then run it with cmd.script
23:10 vexati0n good for things like parsing identifiers that don't work right in one line, you can pass it to cmd.script with args=''
23:11 btorch eliasp: how is roles different than any other grain ? it's just a grain
23:11 felskrone1 joined #salt
23:11 btorch eliasp: eliasp or perhaps you are talking about another role thing
23:12 eliasp well, if you use a role in the sense of "role: webserver" and then assign a configuration to the Minion which might contain DB passwords to connect a web-application to the DB-server, than a rogue Minion in your infrastructure could just assing the role "webserver" to itself to retrieve the DB credentials from your Pillars
23:12 * retrospek trips goodwill
23:13 * goodwill hugs retrospek
23:13 Luke_ joined #salt
23:14 btorch eliasp: I see, not the case here though
23:14 eliasp btorch: ok, just wanted to make sure you're aware of the possible dangers involved in such a workflow
23:15 vexati0n i pretend such security concerns do not even exist because i choose to live in a world where only good people live. plus, if i had to start making considerations for security, i'd have a lot more work to do.
23:15 eliasp vexati0n: have fun in the future when disaster strikes ;)
23:15 goodwill quick someone wedgie vexati0n
23:15 retrospek if only that were reality
23:15 retrospek say hi to the unicorn for us
23:15 eliasp :)
23:16 btorch eliasp: so it's not a danger of having a salt-minion running on a server that could have a public connection, but a service like apache/nginx being running and exploited
23:17 vexati0n yeah... that's why i keep my minions behind firewalls that belong to the Operations group. that way it isn't my fault.
23:17 eliasp btorch: once a Minion is reachable from the outside, always assume the wors (remote network exploitable)
23:17 eliasp s/wors/worst/g
23:17 retrospek rfi -> lfi via nc; voila exploited
23:17 retrospek do not trust a fw to save you
23:18 jj__ joined #salt
23:18 eliasp vexati0n: that's not my style… shifting reponsibilities to someone else and assume over there everything runs always perfect
23:18 Eugene You're really describing everything
23:18 alainv eliasp: so you do targeting purely through minion ID?
23:18 Eugene Trust nothing; validate all input.
23:18 eliasp alainv: yes
23:18 eliasp Eugene: exactly!
23:18 btorch eliasp: ok well our minions are only running on our lnet
23:18 Eugene Salt is not special in this regard
23:18 vexati0n for the project i use Salt on, the first draft of the plan called for using Salt to push a wildcard SSL cert for our primary domain to 1,000 minions living on networks we don't control.
23:18 vexati0n At least I talked them out of that.
23:19 Gareth eliasp: so I'm seeing the same thing you were seeing.  very strange indeed.  to confirm, if you run the state again after the failure it reports as successful right?
23:19 retrospek that doesnt even make sense. if you dont control them you have no action to take on them heh
23:19 Eugene There's good reason you use separate SSL-termination proxies and app servers
23:19 eliasp Gareth: exactly… like there's something left behind by a virtual provider once it's uninstalled again
23:19 vexati0n Gareth: we have our [legitimate] reasons to operate servers on those networks. We just don't get to be admins there.
23:19 Gareth hm. almost seems like something isn't set right *until* the virtual package is installed.
23:20 Gareth vexati0n: hm?
23:20 vexati0n sorr, meant retrospek
23:20 retrospek well yea but if you're not admins then using salt is moot
23:20 bhosmer_ joined #salt
23:21 vexati0n the master is on our side, the minions are webservers on their side.
23:21 haegga_ joined #salt
23:21 chiui joined #salt
23:21 aw110f_ joined #salt
23:22 wigit_ joined #salt
23:22 jalaziz_ joined #salt
23:22 druonysuse joined #salt
23:22 druonysuse joined #salt
23:22 eqe joined #salt
23:22 uzomg_ joined #salt
23:22 pt|Zool_ joined #salt
23:23 jnials joined #salt
23:23 Gareth eliasp: try this on a new clean system. no salt, which you haven't installed nfs-client on yet.
23:24 Gareth eliasp: grep-available -F Provides -s Package,Provides -e "^.+$"
23:24 Gareth eliasp: see if nfs-client is in there.
23:24 espen__ joined #salt
23:24 hoodow_ joined #salt
23:24 hoodow_ joined #salt
23:24 rockey_ joined #salt
23:24 patrek_ joined #salt
23:24 cods_ joined #salt
23:24 drogoh_ joined #salt
23:24 Fa1lure_ joined #salt
23:24 retrospek why not just check nfs-client's rdepend?
23:25 viq_ joined #salt
23:25 eliasp Gareth: ok, one moment
23:25 ksalman joined #salt
23:25 Sacro_ joined #salt
23:25 hotbox_ joined #salt
23:25 erjohnso_ joined #salt
23:25 retr0h_ joined #salt
23:25 ramishra joined #salt
23:26 eliasp Gareth: no… nothing
23:26 eliasp running on a fresh Ubuntu 14.04
23:27 Gareth eliasp: Right.  I'm seeing the same thing.  That's why it's failing the first time, salt is using grep-available to look for it and it's not there, until after something has been installed.
23:28 Gareth ..then it's in the list, so if you remove it or purge it, it's still in the available list.
23:29 JPaul joined #salt
23:30 etw joined #salt
23:31 chitown_ joined #salt
23:31 davidone joined #salt
23:31 N-Mi joined #salt
23:31 Schmidt joined #salt
23:31 ghartz joined #salt
23:32 MaZ- joined #salt
23:32 Ssquidly joined #salt
23:33 aquinas joined #salt
23:33 zandy joined #salt
23:34 eliasp Gareth: can confirm… I purged all 33 packages which were installed by 'nfs-client'… then nfs-client is listed
23:37 Luke_ joined #salt
23:37 retrospek you trying to remove nfs-client and it fails?
23:37 eliasp retrospek: https://github.com/saltstack/salt/issues/14426
23:38 khaije1 how do i determine which version of salt supports the Saltfile?
23:38 eliasp khaije1: what do you mean with "Saltfile"?
23:49 egalano joined #salt
23:50 Ryan_Lane joined #salt
23:54 Gareth eliasp: have an idea how to fix this.  Will keep updating the issue.
23:54 eliasp Gareth: great! thanks a lot for your time
23:55 eliasp to me it's a minor issue… simply worked around it by using nfs-common (provider of said virtual), but just couldn't let this slip through ;)
23:55 Gareth eliasp: no worries :)  Thanks for the tips on Docker, this will definitely provie useful.
23:55 eliasp Gareth: make sure to look at http://docs.saltstack.com/en/latest/ref/states/all/salt.states.dockerio.html ;)
23:56 Gareth eliasp: it's kind of a major bug too.  means virtual packages can't be installed via salt cleanly until they've been installed by Salt unclealy...or some other means.
23:56 forrest Ok Gareth, 4 minutes to go, get your party music and poppers ready
23:57 Gareth eliasp: I've browsed through there and meant to try docker...just didn't have the motivation to.
23:57 * Gareth prepares his silly, enormous party hat
23:57 eliasp Gareth: the dockerio salt states are more for "real" deployments, but for quick tests of such things as this issue, Docker is really great
23:57 forrest excellent
23:58 eliasp have fun partying… you deserved it ;)
23:58 * eliasp has another 45 minutes to go… will my stuff make it to prod until then? no one knows ;)
23:58 forrest prod on a friday??
23:58 forrest wait, isn't it Saturday in Germany?
23:59 forrest or are you proxying through that DE host
23:59 eliasp who gives a fuck about weekends ;)
23:59 torrancew eliasp: https://twitter.com/iamdevloper/status/450905958139834368
23:59 forrest eightyeight, I do
23:59 eliasp forrest: but yes, it's Saturday since 2h here ;)

| Channels | #salt index | Today | | Search | Google Search | Plain-Text | summary